# A.6.1.3 Processes for responsible design and development of AI systems

Set down in writing the particular processes the organization follows to design and build the AI system responsibly. The artefact behind the answer is documented development process covering life cycle stages, testing, human oversight requirements, impact assessment points, training data rules, developer expertise, release criteria, approvals, change control, usability and controllability and stakeholder engagement. For processes for responsible design and development of ai systems the evidence sits at the gate it belongs to.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.6.1.3
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

Set down in writing the particular processes the organization follows to design and build the AI system responsibly.

## Where generative AI changes the answer

The process has to reach the prompt design and the retrieval configuration, because those choices decide the risk as much as the model does.

## Who it binds

The AI system owner and the delivery team at each life cycle gate.

## Evidence an auditor samples

- Documented development process covering life cycle stages, testing, human oversight requirements, impact assessment points, training data rules, developer expertise, release criteria, approvals, change control, usability and controllability and stakeholder engagement

## The test you can run

Ask for the verification record and the deployment decision, and check that the second refers to the first.

## Common failures

- No release criteria or sign-off gates
- Human oversight requirements not defined at design

## Before the draft publishes

Walk the use through the life cycle gates and record which gate has no evidence behind it. That gap is what an auditor will ask about first.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.